I'm in process of testing a VPN between a Fortigate 90D and Sonicwall TZ210. Because of gov't regulation (yay CJIS) I have to run the devices in FIPS mode, which means they have to use a cert instead ...